Skip to content

fix(access): exchange oidc tokens for platform jwt sessions#105

Merged
Agent-Hellboy merged 2 commits intomainfrom
access_oidc_platform_session_tokens
Apr 30, 2026
Merged

fix(access): exchange oidc tokens for platform jwt sessions#105
Agent-Hellboy merged 2 commits intomainfrom
access_oidc_platform_session_tokens

Conversation

@Agent-Hellboy
Copy link
Copy Markdown
Owner

@Agent-Hellboy Agent-Hellboy commented Apr 30, 2026

fixes #102

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request implements OIDC-based authentication, adding a new /api/auth/oidc endpoint to the API service and updating the UI service to exchange OIDC ID tokens for platform access tokens. The changes include new login handlers, user resolution logic, and comprehensive tests. Feedback suggests improving audit logs for failed logins by extracting identity information from the token, avoiding fragile hardcoded URLs in internal dummy requests, and eliminating redundant database lookups in the user resolution process.

Comment thread services/api/platform_auth.go
Comment thread services/api/platform_auth.go Outdated
Comment thread services/api/platform_auth.go Outdated
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 52695da3dc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread services/ui/main.go Outdated
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 30, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.27%. Comparing base (92178fe) to head (071a43b).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #105      +/-   ##
==========================================
+ Coverage   57.15%   57.27%   +0.11%     
==========================================
  Files          59       59              
  Lines       10448    10476      +28     
==========================================
+ Hits         5972     6000      +28     
  Misses       3905     3905              
  Partials      571      571              
Flag Coverage Δ
pre-merge 57.27% <ø> (+0.11%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 2 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@Agent-Hellboy Agent-Hellboy merged commit 2e9d384 into main Apr 30, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

auth: replace UI in-memory forwarding of Google ID tokens with platform-issued session tokens

1 participant